Method of inhabiting MAC address attack in EVI (Ethernet Virtualization Interconnection) network and ED (edge device)

2013 
The invention discloses a method of inhabiting MAC address attack in EVI (Ethernet Virtualization Interconnection) network. The method comprises steps: a priority field is added to an MAC table entry, and priority information is added to an LSP message of an EVI-ISIS protocol; when an edge device learns the MAC address from the local or the MAC address with normal priority from the LSP message, if the local MAC table has the MAC address table entry with the same authorized VLAN ID and the same MAC address and the local MAC address is the high priority showing the normal traffic flow, the MAC address table entry with high priority is updated to be in an unavailable state, and the learnt MAC address table entry is recorded and is set to be normal priority; and when MAC attack is detected, the MAC address table entry with high priority is updated to be in a dynamic learning state, and the MAC address table entry with the same VLAN ID and the MAC address in the local MAC table is updated to be in an unavailable state. The invention also discloses an edge device (ED). Thus, MAC address attack can be inhabited, the utilization rate of device CPU resources is recued, missing of data packets is reduced, and normal forwarding of data stream is guided.
    • Correction
    • Source
    • Cite
    • Save
    • Machine Reading By IdeaReader
    0
    References
    0
    Citations
    NaN
    KQI
    []